# Elasticsearch

**URL:** https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1578

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1579

---

## [ElasticSearch 6 recursive](https://discuss.elastic.co/t/elasticsearch-6-recursive/144814)

<div class="topic-metadata">

**Author:** [@naresh236](https://discuss.elastic.co/u/naresh236)\
**Replies:** 0\
**Last updated:** [August 17, 2018, 3:58am UTC](https://discuss.elastic.co/t/elasticsearch-6-recursive/144814 "2018-08-17T03:58:39Z")

</div>

Please give me a suggestion to how we can implement recursive functionality in Elastic search 6 i am new to elastic search I am having a below calss public class Employee { public int Emp\_Id { get; set; } public st…

---

## [Clarification on licensing](https://discuss.elastic.co/t/clarification-on-licensing/144342)

<div class="topic-metadata">

**Author:** [@sl1729](https://discuss.elastic.co/u/sl1729)\
**Replies:** 6\
**Last updated:** [August 17, 2018, 4:02am UTC](https://discuss.elastic.co/t/clarification-on-licensing/144342 "2018-08-17T04:02:13Z")

</div>

Hello All, I need couple of clarifications based on scenario's, need your input. Apology if this is a redundant question. scenario 1 3 nodes - master, data, ingest 2 nodes - co-coordinating nodes scenario 2 Data ce…

---

## [Uneven load distribution for search](https://discuss.elastic.co/t/uneven-load-distribution-for-search/144742)

<div class="topic-metadata">

**Author:** [@stimur](https://discuss.elastic.co/u/stimur)\
**Replies:** 5\
**Last updated:** [August 17, 2018, 2:59am UTC](https://discuss.elastic.co/t/uneven-load-distribution-for-search/144742 "2018-08-17T02:59:31Z")

</div>

Hello! I have weird issue after migrating from 2.4 to 6.3. My cluster consists of 10 nodes: 3 master nodes, (m3.medium, 1CPU/4GB RAM) 3 client nodes running ES, Logstash and Kibana. (c5.xlarge 4xCPU/8GB RAM) 4 data …

---

## [Speed up shard rebalance](https://discuss.elastic.co/t/speed-up-shard-rebalance/144803)

<div class="topic-metadata">

**Author:** [@stimur](https://discuss.elastic.co/u/stimur)\
**Replies:** 0\
**Last updated:** [August 17, 2018, 2:19am UTC](https://discuss.elastic.co/t/speed-up-shard-rebalance/144803 "2018-08-17T02:19:18Z")

</div>

I couldn't find anything recent on this topic. I have 4 data nodes, excluded one from routing PUT \_cluster/settings { "transient" :{ "cluster.routing.allocation.exclude.\_ip" : "10.32.130.87" } } and added 5…

---

## [How can i sort by heat?](https://discuss.elastic.co/t/how-can-i-sort-by-heat/144462)

<div class="topic-metadata">

**Author:** [@aimerwhy](https://discuss.elastic.co/u/aimerwhy)\
**Replies:** 2\
**Last updated:** [August 17, 2018, 1:54am UTC](https://discuss.elastic.co/t/how-can-i-sort-by-heat/144462 "2018-08-17T01:54:40Z")

</div>

I want to customize the search results，which sort it by heat. Heat means click rate,the more time of click rate,the higher heat. And then the higher the click rate, the higher the ranking about the search results. Any…

---

## [How to fix index\_out\_of\_bounds\_exception exception in aggregation in painless script](https://discuss.elastic.co/t/how-to-fix-index-out-of-bounds-exception-exception-in-aggregation-in-painless-script/144787)

<div class="topic-metadata">

**Author:** [@Steven\_Ensslen](https://discuss.elastic.co/u/Steven_Ensslen)\
**Replies:** 1\
**Last updated:** [August 16, 2018, 11:17pm UTC](https://discuss.elastic.co/t/how-to-fix-index-out-of-bounds-exception-exception-in-aggregation-in-painless-script/144787 "2018-08-16T23:17:57Z")

</div>

I have what I believe to be an entirely normal index where 1% of the documents don't have a field present. I'd like to write a painless script that references that field, but whenever I do I get "Courier fetch: X of Y s…

---

## [Filter Product by Authorized user](https://discuss.elastic.co/t/filter-product-by-authorized-user/144794)

<div class="topic-metadata">

**Author:** [@manivannan\_s](https://discuss.elastic.co/u/manivannan_s)\
**Replies:** 0\
**Last updated:** [August 16, 2018, 11:10pm UTC](https://discuss.elastic.co/t/filter-product-by-authorized-user/144794 "2018-08-16T23:10:30Z")

</div>

I would like to allow our buyers to view and purchase only authorized products. This authorization is controlled at ERP system restriction applied at material level (material to reseller combination) Material(Document…

---

## [Error: Curl with Elasticsearch 6](https://discuss.elastic.co/t/error-curl-with-elasticsearch-6/144620)

<div class="topic-metadata">

**Author:** [@ebolanos137](https://discuss.elastic.co/u/ebolanos137)\
**Replies:** 4\
**Last updated:** [August 16, 2018, 8:47pm UTC](https://discuss.elastic.co/t/error-curl-with-elasticsearch-6/144620 "2018-08-16T20:47:35Z")

</div>

I'm trying to do curl -X PUT -d @'/home/cuckoo/.cuckoo/elasticsearch/template.json' 'http://localhost:9200/\_template/cuckoo' but, I have this error: {"error":"Content-Type header \[application/x-www-form-urlencoded\] is…

---

## [CUMSUM is missing in machine learning](https://discuss.elastic.co/t/cumsum-is-missing-in-machine-learning/144666)

<div class="topic-metadata">

**Author:** [@Amon](https://discuss.elastic.co/u/Amon)\
**Replies:** 2\
**Last updated:** [August 16, 2018, 8:24pm UTC](https://discuss.elastic.co/t/cumsum-is-missing-in-machine-learning/144666 "2018-08-16T20:24:41Z")

</div>

Dear, For a project I'm using your machine learning part. Unfortunaletly I'm using a collumn with value +1,-1 and 0 which stand for people in a queue. I want to detect anomalies with the "high sum" function to detect wh…

---

## [Elasticsearch -Query multiple fields vs solr TermsComponent](https://discuss.elastic.co/t/elasticsearch-query-multiple-fields-vs-solr-termscomponent/144779)

<div class="topic-metadata">

**Author:** [@snigdharao](https://discuss.elastic.co/u/snigdharao)\
**Replies:** 0\
**Last updated:** [August 16, 2018, 8:19pm UTC](https://discuss.elastic.co/t/elasticsearch-query-multiple-fields-vs-solr-termscomponent/144779 "2018-08-16T20:19:01Z")

</div>

I have a question if elastic has a feature similar to terms component in solr. i have an use case where i want to search text from multiple fields and also i need response of unique values and fields that matched the te…

---

## [Template within a template](https://discuss.elastic.co/t/template-within-a-template/144773)

<div class="topic-metadata">

**Author:** [@kfarbman](https://discuss.elastic.co/u/kfarbman)\
**Replies:** 0\
**Last updated:** [August 16, 2018, 7:12pm UTC](https://discuss.elastic.co/t/template-within-a-template/144773 "2018-08-16T19:12:45Z")

</div>

Is there any way to call a template within a template. For example, in python, I have 3 functions that create JSON of queries that I call to combine into a bigger template to query. So I have (basically): match = {quer…

---

## [Documentation on settings.index.format](https://discuss.elastic.co/t/documentation-on-settings-index-format/144772)

<div class="topic-metadata">

**Author:** [@djtecha](https://discuss.elastic.co/u/djtecha)\
**Replies:** 0\
**Last updated:** [August 16, 2018, 7:08pm UTC](https://discuss.elastic.co/t/documentation-on-settings-index-format/144772 "2018-08-16T19:08:27Z")

</div>

I can not find any info about what this index setting means. Could someone please explain this or point me to the appropriate ES documentation on it? This is an index setting that I see in system indices like .watcher-hi…

---

## [Cant reach elasticsearch](https://discuss.elastic.co/t/cant-reach-elasticsearch/144288)

<div class="topic-metadata">

**Author:** [@Raghuveer\_SJ](https://discuss.elastic.co/u/Raghuveer_SJ)\
**Replies:** 5\
**Last updated:** [August 16, 2018, 6:17pm UTC](https://discuss.elastic.co/t/cant-reach-elasticsearch/144288 "2018-08-16T18:17:57Z")

</div>

I have 2 questions : I have installed ELK on a different machine and am able to reach kibana but not elasticsearch. When I ping I see http://:9200/ "mmm...can’t reach this page" as if the address is incorrect. When log…

---

## [Aggregate two collections on date field](https://discuss.elastic.co/t/aggregate-two-collections-on-date-field/144760)

<div class="topic-metadata">

**Author:** [@dpolicastro](https://discuss.elastic.co/u/dpolicastro)\
**Replies:** 0\
**Last updated:** [August 16, 2018, 5:25pm UTC](https://discuss.elastic.co/t/aggregate-two-collections-on-date-field/144760 "2018-08-16T17:25:00Z")

</div>

Hello guys, I'm starting using Elasticsearch and I would like to know some things before I deep dive in it. Is it possible to query two different indexes, and aggregate the data matching a specific date? If the dat…

---

## [Cryptographic hash within ingest pipelines](https://discuss.elastic.co/t/cryptographic-hash-within-ingest-pipelines/144735)

<div class="topic-metadata">

**Author:** [@Tratatut](https://discuss.elastic.co/u/Tratatut)\
**Replies:** 1\
**Last updated:** [August 16, 2018, 4:00pm UTC](https://discuss.elastic.co/t/cryptographic-hash-within-ingest-pipelines/144735 "2018-08-16T16:00:45Z")

</div>

Hi Does anybody now is there a way to apply cryptographic hash to certain field/s within ingest pipelines ? Thanks in advance

---

## [Send API Events to Servicenow using webhook](https://discuss.elastic.co/t/send-api-events-to-servicenow-using-webhook/142108)

<div class="topic-metadata">

**Author:** [@charan.gandra](https://discuss.elastic.co/u/charan.gandra)\
**Replies:** 1\
**Last updated:** [August 16, 2018, 4:00pm UTC](https://discuss.elastic.co/t/send-api-events-to-servicenow-using-webhook/142108 "2018-08-16T16:00:15Z")

</div>

Hi I am trying to send an API Event using the webhook actions in elasticsearch watcher. However I am getting errors due to unknown fields in EventList. I ca send a API event from elasticsearch server using the CURL, so…

---

## [How to require two analyzers to match terms AND positions in full-text searching?](https://discuss.elastic.co/t/how-to-require-two-analyzers-to-match-terms-and-positions-in-full-text-searching/144697)

<div class="topic-metadata">

**Author:** [@bkazez](https://discuss.elastic.co/u/bkazez)\
**Replies:** 0\
**Last updated:** [August 16, 2018, 10:55am UTC](https://discuss.elastic.co/t/how-to-require-two-analyzers-to-match-terms-and-positions-in-full-text-searching/144697 "2018-08-16T10:55:38Z")

</div>

Hello, I have an Elasticsearch mapping in which one field, surname, is analyzed according to ngram and phonetic analyzers. I previously asked about how to ensure that BOTH queries match each surname, essentially so that …

---

## [APIs in ES](https://discuss.elastic.co/t/apis-in-es/144713)

<div class="topic-metadata">

**Author:** [@Arun\_Murugappan](https://discuss.elastic.co/u/Arun_Murugappan)\
**Replies:** 5\
**Last updated:** [August 16, 2018, 1:00pm UTC](https://discuss.elastic.co/t/apis-in-es/144713 "2018-08-16T13:00:12Z")

</div>

To communicate with ES using a webbrowser, some e.g.s Cat APIs IPaddress:9200/\_cat/indices Search APIs IPaddress:9200/\_search?q=fieldname:valuename Can Documents APIs like PUT,POST,DELETE be used in the same way as ab…

---

## [Deleting oldest data weekly](https://discuss.elastic.co/t/deleting-oldest-data-weekly/144708)

<div class="topic-metadata">

**Author:** [@saisimo02](https://discuss.elastic.co/u/saisimo02)\
**Replies:** 3\
**Last updated:** [August 16, 2018, 12:58pm UTC](https://discuss.elastic.co/t/deleting-oldest-data-weekly/144708 "2018-08-16T12:58:46Z")

</div>

Hello, I am using ELK to create dashboards but I would like to delete frequently data, in fact every minute I get 100 new data and I would like to delete every week the oldest data. Any suggestions please. Thanks

---

## [Elasticsearch Ngram sort by the nearest results](https://discuss.elastic.co/t/elasticsearch-ngram-sort-by-the-nearest-results/142777)

<div class="topic-metadata">

**Author:** [@aymenkn](https://discuss.elastic.co/u/aymenkn)\
**Replies:** 2\
**Last updated:** [August 16, 2018, 12:57pm UTC](https://discuss.elastic.co/t/elasticsearch-ngram-sort-by-the-nearest-results/142777 "2018-08-16T12:57:48Z")

</div>

I have the following settings and analyzer: { "settings":{ "analysis":{ "filter":{ "nGram\_filter":{ "type":"nGram", "min\_gram":1, "max\_gram":200…

---

## [Role of coordination nodes in cluster](https://discuss.elastic.co/t/role-of-coordination-nodes-in-cluster/144719)

<div class="topic-metadata">

**Author:** [@jigish\_thakar](https://discuss.elastic.co/u/jigish_thakar)\
**Replies:** 0\
**Last updated:** [August 16, 2018, 12:44pm UTC](https://discuss.elastic.co/t/role-of-coordination-nodes-in-cluster/144719 "2018-08-16T12:44:42Z")

</div>

Hi All, we have cluster of 17 nodes running elasticsearch 2.4.6 (outdated!). we have 10 data nodes of i3.2xlarge, 3 master nodes m3.xlarge, 4 corrdinating nodes again m3.xlarge. out of these 4 corrdiantion nodes we ha…

---

## [Spacewalk and Elastic](https://discuss.elastic.co/t/spacewalk-and-elastic/144690)

<div class="topic-metadata">

**Author:** [@adankert](https://discuss.elastic.co/u/adankert)\
**Replies:** 0\
**Last updated:** [August 16, 2018, 10:37am UTC](https://discuss.elastic.co/t/spacewalk-and-elastic/144690 "2018-08-16T10:37:33Z")

</div>

Has anyone added the Elasticsearch repos for CentOS/RedHat to Spacewalk? If so: Care to share a description?

---

## [Partitioning Data in Elastic Search](https://discuss.elastic.co/t/partitioning-data-in-elastic-search/143946)

<div class="topic-metadata">

**Author:** [@Chinmaya\_Poswalia](https://discuss.elastic.co/u/Chinmaya_Poswalia)\
**Replies:** 7\
**Last updated:** [August 16, 2018, 10:21am UTC](https://discuss.elastic.co/t/partitioning-data-in-elastic-search/143946 "2018-08-16T10:21:41Z")

</div>

We have a use-case where we have all the queries querying within a specific partition of data. For example, our document looks like PersonID: Unique id of the person First Name: First Name of Person Last Name: Last N…

---

## [Combine Terms and GeohashGrid (?) aggregations for merged results](https://discuss.elastic.co/t/combine-terms-and-geohashgrid-aggregations-for-merged-results/142894)

<div class="topic-metadata">

**Author:** [@Destroy666](https://discuss.elastic.co/u/Destroy666)\
**Replies:** 2\
**Last updated:** [August 16, 2018, 10:11am UTC](https://discuss.elastic.co/t/combine-terms-and-geohashgrid-aggregations-for-merged-results/142894 "2018-08-16T10:11:45Z")

</div>

I have following data - areas with boundingBoxCenter geo\_point field and businesses with areaIds array and location geo\_point field. For now I am aggregating them just by Terms, by setting include of areaIds to the valu…

---

## [Unable to start process](https://discuss.elastic.co/t/unable-to-start-process/144637)

<div class="topic-metadata">

**Author:** [@warhol](https://discuss.elastic.co/u/warhol)\
**Replies:** 1\
**Last updated:** [August 16, 2018, 9:44am UTC](https://discuss.elastic.co/t/unable-to-start-process/144637 "2018-08-16T09:44:46Z")

</div>

Hi, I have installed elasticsearch on a computer running CentOS. When I try to start it I get the following output: \[root@localhost ~\]# sudo systemctl start elasticsearch Job for elasticsearch.service failed because th…

---

## [Log stash configuration file to push delta of data from SQL Server using JDBC Importer to elastic search](https://discuss.elastic.co/t/log-stash-configuration-file-to-push-delta-of-data-from-sql-server-using-jdbc-importer-to-elastic-search/144313)

<div class="topic-metadata">

**Author:** [@pavitra21](https://discuss.elastic.co/u/pavitra21)\
**Replies:** 2\
**Last updated:** [August 16, 2018, 9:23am UTC](https://discuss.elastic.co/t/log-stash-configuration-file-to-push-delta-of-data-from-sql-server-using-jdbc-importer-to-elastic-search/144313 "2018-08-16T09:23:14Z")

</div>

my configuration file input{ jdbc { jdbc\_connection\_string =\> "jdbc:mysql://localhost:3307/demo" jdbc\_user =\> "root" jdbc\_password =\> "pavitra" jdbc\_validate\_connection =\> true jdbc\_driver\_library =\> "mysql-connec…

---

## [Empty record in ElasticSearch](https://discuss.elastic.co/t/empty-record-in-elasticsearch/144481)

<div class="topic-metadata">

**Author:** [@czome](https://discuss.elastic.co/u/czome)\
**Replies:** 14\
**Last updated:** [August 15, 2018, 5:04pm UTC](https://discuss.elastic.co/t/empty-record-in-elasticsearch/144481 "2018-08-15T17:04:06Z")

</div>

Hello, I don't understand why my logstash config don't save data in ES. My data comes from an xml file and here is my pipeline conf : input { beats { port =\> "5044" host =\> "localhost" client\_inactivity\_timeout =\> …

---

## [Format triggered\_time to local time zone in action](https://discuss.elastic.co/t/format-triggered-time-to-local-time-zone-in-action/144299)

<div class="topic-metadata">

**Author:** [@jakn](https://discuss.elastic.co/u/jakn)\
**Replies:** 2\
**Last updated:** [August 14, 2018, 11:07am UTC](https://discuss.elastic.co/t/format-triggered-time-to-local-time-zone-in-action/144299 "2018-08-14T11:07:47Z")

</div>

I want to include triggered\_time in local time zone in my actions (log, email, ...). {{ctx.trigger.triggered\_time}} shows triggered\_time in UTC, but how should the example below be modified to also include triggered\_tim…

---

## [Problems upgrading elasticsearch from 5.6.1 to 6.3.2](https://discuss.elastic.co/t/problems-upgrading-elasticsearch-from-5-6-1-to-6-3-2/144625)

<div class="topic-metadata">

**Author:** [@McElroy](https://discuss.elastic.co/u/McElroy)\
**Replies:** 1\
**Last updated:** [August 16, 2018, 7:27am UTC](https://discuss.elastic.co/t/problems-upgrading-elasticsearch-from-5-6-1-to-6-3-2/144625 "2018-08-16T07:27:41Z")

</div>

Hi, I tried to install Elasticsearch on my Debian machine but everytime I try, I get: apt install elasticsearch-6.3.2.deb Reading package lists... Done Building dependency tree Reading state information... Done…

---

## [Elasticsearch on server with ssd and hdd disks](https://discuss.elastic.co/t/elasticsearch-on-server-with-ssd-and-hdd-disks/144632)

<div class="topic-metadata">

**Author:** [@srf\_68](https://discuss.elastic.co/u/srf_68)\
**Replies:** 1\
**Last updated:** [August 16, 2018, 6:56am UTC](https://discuss.elastic.co/t/elasticsearch-on-server-with-ssd-and-hdd-disks/144632 "2018-08-16T06:56:40Z")

</div>

I have server with two SSD and two HDD disks. What is the best way to install and run Elasticsearch on this server to get the lowest index and search time. Is it possible to index documents on SSD disks first and move th…

[Previous page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1577)

[Next page](https://discuss.elastic.co/c/elastic-stack/elasticsearch/6.md?page=1579)
